I have a fresh install of Graylog on CentOS 7 with two inputs:
Syslog TCP on Port 1514
Syslog UDP on Port 1514
The Syslog TCP input is accepting messages from network devices and using Kiwi Syslog Message Generator, however the Syslog UDP input is not accepting (or at least not showing) any messages in Graylog from any device or Kiwi Syslog Message Generator.
I have confirmed:
Ports opened and listening using ss to confirm
Ports allowed through the firewall
The input is running
There is no other firewall between the graylog server and other network devices
No errors in server.log
I have tried:
Setting up a different Syslog UDP input on port 8888
Binding the input to the servers IP address rather than 0.0.0.0/127.0.0.1
Setting up a Raw text UDP input on port 1514
I’m pretty stumped now due to the fact TCP works absolutely fine, just not any form of UDP.
Any help is greatly appriciated.